Windows log file:
un Mar 18 21:44:59 2018
Command line: TestDisk
TestDisk 7.1-WIP, Data Recovery Utility, March 2018
Christophe GRENIER <
grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 6.4, Cygwin 2009.0
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=127139840
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=127139840
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=246698634752
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=127139840
Hard disk list
Disk /dev/sda - 250 GB / 232 GiB - CHS 30401 255 63, sector size=512 - Samsung SSD 840 EVO 250GB, S/N:S1DBNSADC79975J, FW:EXT0BB0Q
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - WDC WD10JPVX-22JC3T0, S/N:WD-WXF1AA501KYE, FW:01.01A01
Disk /dev/sdc - 250 GB / 232 GiB - CHS 30401 255 63, sector size=512 - Samsung Portable SSD T3, S/N:CC2B97654321
Disk /dev/sdd - 127 MB / 121 MiB - CHS 15 255 63, sector size=512 - RICOH R5C822, S/N:0001, FW:01
Partition table type (auto): Intel
Disk /dev/sdc - 250 GB / 232 GiB - Samsung Portable SSD T3
Partition table type: Intel
Analyse Disk /dev/sdc - 250 GB / 232 GiB - CHS 30401 255 63
Geometry from i386 MBR: head=255 sector=63
test_FAT()
1 P FAT16 >32M 0 32 33 30401 42 41 488392704
sector_size 0
cluster_size 0
reserved 0
fats 0
dir_entries 0
sectors 0
media 00
fat_length 0
secs_track 0
heads 0
hidden 0
total_sect 0
check_part_i386 failed for partition type 06
Current partition structure:
Invalid FAT boot sector
1 P FAT16 >32M 0 32 33 30401 42 41 488392704
1 P FAT16 >32M 0 32 33 30401 42 41 488392704
No partition is bootable
search_part()
Disk /dev/sdc - 250 GB / 232 GiB - CHS 30401 255 63
recover_EXT2: s_block_group_nr=0/118, s_mnt_count=152/4294967295, s_blocks_per_group=32768, s_inodes_per_group=7840
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 3873920
recover_EXT2: part_size 30991360
Filesystem created: Thu Sep 21 09:13:04 2017
Last mount time: Mon Nov 6 15:12:48 2017
Linux 23688 54 47 25617 86 5 30991360 [retropie]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 15 GB / 14 GiB
file_pread(6,2,buffer,488398847(30401/107/42)) lseek err Invalid argument
file_pread(6,1,buffer,488398847(30401/107/42)) lseek err Invalid argument
file_pread(6,2,buffer,488398848(30401/107/43)) lseek err Invalid argument
file_pread(6,14,buffer,488398850(30401/107/45)) lseek err Invalid argument
file_pread(6,3,buffer,488398864(30401/107/59)) lseek err Invalid argument
file_pread(6,3,buffer,488398911(30401/108/43)) lseek err Invalid argument
file_pread(6,8,buffer,488398927(30401/108/59)) lseek err Invalid argument
file_pread(6,11,buffer,488398974(30401/109/43)) lseek err Invalid argument
file_pread(6,2,buffer,488400896(30401/140/12)) lseek err Invalid argument
Results
* Linux 23688 54 47 25617 102 21 30992384 [retropie]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 15 GB / 14 GiB
interface_write()
1 * Linux 23688 54 47 25617 102 21 30992384 [retropie]
search_part()
Disk /dev/sdc - 250 GB / 232 GiB - CHS 30401 255 63
recover_EXT2: s_block_group_nr=0/118, s_mnt_count=152/4294967295, s_blocks_per_group=32768, s_inodes_per_group=7840
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 3873920
recover_EXT2: part_size 30991360
Filesystem created: Thu Sep 21 09:13:04 2017
Last mount time: Mon Nov 6 15:12:48 2017
Linux 23688 54 47 25617 86 5 30991360 [retropie]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 15 GB / 14 GiB
recover_EXT2: s_block_group_nr=0/118, s_mnt_count=147/4294967295, s_blocks_per_group=32768, s_inodes_per_group=7840
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 3873920
recover_EXT2: part_size 30991360
Filesystem created: Thu Sep 21 09:13:04 2017
Last mount time: Mon Nov 6 13:30:23 2017
Linux 23688 152 17 25617 183 38 30991360 [retropie]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 15 GB / 14 GiB
recover_EXT2: s_block_group_nr=0/118, s_mnt_count=10/4294967295, s_blocks_per_group=32768, s_inodes_per_group=7840
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 3873920
recover_EXT2: part_size 30991360
Filesystem created: Thu Sep 21 09:13:04 2017
Last mount time: Thu Oct 5 13:29:45 2017
Linux 23695 122 44 25624 154 2 30991360 [retropie]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 15 GB / 14 GiB
file_pread(6,2,buffer,488398847(30401/107/42)) lseek err Invalid argument
file_pread(6,1,buffer,488398847(30401/107/42)) lseek err Invalid argument
file_pread(6,2,buffer,488398848(30401/107/43)) lseek err Invalid argument
Results
Linux 23688 54 47 25617 102 21 30992384 [retropie]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 15 GB / 14 GiB
Linux 23688 152 17 25617 199 54 30992384 [retropie]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 15 GB / 14 GiB
Linux 23695 122 44 25624 170 18 30992384 [retropie]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 15 GB / 14 GiB
interface_write()
No partition found or selected for recovery
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
Analyse Disk /dev/sdc - 250 GB / 232 GiB - CHS 30401 255 63
Geometry from i386 MBR: head=255 sector=63
test_FAT()
1 P FAT16 >32M 0 32 33 30401 42 41 488392704
sector_size 0
cluster_size 0
reserved 0
fats 0
dir_entries 0
sectors 0
media 00
fat_length 0
secs_track 0
heads 0
hidden 0
total_sect 0
check_part_i386 failed for partition type 06
Current partition structure:
Invalid FAT boot sector
1 P FAT16 >32M 0 32 33 30401 42 41 488392704
1 P FAT16 >32M 0 32 33 30401 42 41 488392704
No partition is bootable
search_part()
Disk /dev/sdc - 250 GB / 232 GiB - CHS 30401 255 63
recover_EXT2: s_block_group_nr=0/118, s_mnt_count=152/4294967295, s_blocks_per_group=32768, s_inodes_per_group=7840
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 3873920
recover_EXT2: part_size 30991360
Filesystem created: Thu Sep 21 09:13:04 2017
Last mount time: Mon Nov 6 15:12:48 2017
Linux 23688 54 47 25617 86 5 30991360 [retropie]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 15 GB / 14 GiB
file_pread(6,2,buffer,488398847(30401/107/42)) lseek err Invalid argument
file_pread(6,1,buffer,488398847(30401/107/42)) lseek err Invalid argument
file_pread(6,2,buffer,488398848(30401/107/43)) lseek err Invalid argument
file_pread(6,14,buffer,488398850(30401/107/45)) lseek err Invalid argument
file_pread(6,3,buffer,488398864(30401/107/59)) lseek err Invalid argument
file_pread(6,3,buffer,488398911(30401/108/43)) lseek err Invalid argument
file_pread(6,8,buffer,488398927(30401/108/59)) lseek err Invalid argument
file_pread(6,11,buffer,488398974(30401/109/43)) lseek err Invalid argument
file_pread(6,2,buffer,488400896(30401/140/12)) lseek err Invalid argument
Results
* Linux 23688 54 47 25617 102 21 30992384 [retropie]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 15 GB / 14 GiB
interface_write()
1 * Linux 23688 54 47 25617 102 21 30992384 [retropie]
search_part()
Disk /dev/sdc - 250 GB / 232 GiB - CHS 30401 255 63
file_pread(6,2,buffer,488398847(30401/107/42)) lseek err Invalid argument
file_pread(6,1,buffer,488398847(30401/107/42)) lseek err Invalid argument
Search for partition aborted
Results
interface_write()
No partition found or selected for recovery
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
Interface Advanced
Geometry from i386 MBR: head=255 sector=63
test_FAT()
1 P FAT16 >32M 0 32 33 30401 42 41 488392704
sector_size 0
cluster_size 0
reserved 0
fats 0
dir_entries 0
sectors 0
media 00
fat_length 0
secs_track 0
heads 0
hidden 0
total_sect 0
check_part_i386 failed for partition type 06
1 P FAT16 >32M 0 32 33 30401 42 41 488392704
FAT: Can't list files, bad cluster size.
Directory /
TestDisk exited normally.
Sun Mar 18 22:25:03 2018
Command line: TestDisk
TestDisk 7.1-WIP, Data Recovery Utility, March 2018
Christophe GRENIER <
grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 6.4, Cygwin 2009.0
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=127139840
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=127139840
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=246698634752
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=250057064448
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=127139840
Hard disk list
Disk /dev/sda - 250 GB / 232 GiB - CHS 30401 255 63, sector size=512 - Samsung SSD 840 EVO 250GB, S/N:S1DBNSADC79975J, FW:EXT0BB0Q
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - WDC WD10JPVX-22JC3T0, S/N:WD-WXF1AA501KYE, FW:01.01A01
Disk /dev/sdc - 250 GB / 232 GiB - CHS 30401 255 63, sector size=512 - Samsung Portable SSD T3, S/N:CC2B97654321
Disk /dev/sdd - 127 MB / 121 MiB - CHS 15 255 63, sector size=512 - RICOH R5C822, S/N:0001, FW:01
Partition table type (auto): Intel
Disk /dev/sdc - 250 GB / 232 GiB - Samsung Portable SSD T3
Partition table type: Intel
Analyse Disk /dev/sdc - 250 GB / 232 GiB - CHS 30401 255 63
Geometry from i386 MBR: head=255 sector=63
test_FAT()
1 P FAT16 >32M 0 32 33 30401 42 41 488392704
sector_size 0
cluster_size 0
reserved 0
fats 0
dir_entries 0
sectors 0
media 00
fat_length 0
secs_track 0
heads 0
hidden 0
total_sect 0
check_part_i386 failed for partition type 06
Current partition structure:
Invalid FAT boot sector
1 P FAT16 >32M 0 32 33 30401 42 41 488392704
1 P FAT16 >32M 0 32 33 30401 42 41 488392704
No partition is bootable
search_part()
Disk /dev/sdc - 250 GB / 232 GiB - CHS 30401 255 63
recover_EXT2: s_block_group_nr=0/118, s_mnt_count=152/4294967295, s_blocks_per_group=32768, s_inodes_per_group=7840
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 3873920
recover_EXT2: part_size 30991360
Filesystem created: Thu Sep 21 09:13:04 2017
Last mount time: Mon Nov 6 15:12:48 2017
Linux 23688 54 47 25617 86 5 30991360 [retropie]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 15 GB / 14 GiB
file_pread(6,2,buffer,488398847(30401/107/42)) lseek err Invalid argument
file_pread(6,1,buffer,488398847(30401/107/42)) lseek err Invalid argument
file_pread(6,2,buffer,488398848(30401/107/43)) lseek err Invalid argument
file_pread(6,14,buffer,488398850(30401/107/45)) lseek err Invalid argument
file_pread(6,3,buffer,488398864(30401/107/59)) lseek err Invalid argument
file_pread(6,3,buffer,488398911(30401/108/43)) lseek err Invalid argument
file_pread(6,8,buffer,488398927(30401/108/59)) lseek err Invalid argument
file_pread(6,11,buffer,488398974(30401/109/43)) lseek err Invalid argument
file_pread(6,2,buffer,488400896(30401/140/12)) lseek err Invalid argument
Results
* Linux 23688 54 47 25617 102 21 30992384 [retropie]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 15 GB / 14 GiB
interface_write()
1 * Linux 23688 54 47 25617 102 21 30992384 [retropie]
search_part()
Disk /dev/sdc - 250 GB / 232 GiB - CHS 30401 255 63
recover_EXT2: s_block_group_nr=0/118, s_mnt_count=152/4294967295, s_blocks_per_group=32768, s_inodes_per_group=7840
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 3873920
recover_EXT2: part_size 30991360
Filesystem created: Thu Sep 21 09:13:04 2017
Last mount time: Mon Nov 6 15:12:48 2017
Linux 23688 54 47 25617 86 5 30991360 [retropie]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 15 GB / 14 GiB
recover_EXT2: s_block_group_nr=0/118, s_mnt_count=147/4294967295, s_blocks_per_group=32768, s_inodes_per_group=7840
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 3873920
recover_EXT2: part_size 30991360
Filesystem created: Thu Sep 21 09:13:04 2017
Last mount time: Mon Nov 6 13:30:23 2017
Linux 23688 152 17 25617 183 38 30991360 [retropie]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 15 GB / 14 GiB
recover_EXT2: s_block_group_nr=0/118, s_mnt_count=10/4294967295, s_blocks_per_group=32768, s_inodes_per_group=7840
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 3873920
recover_EXT2: part_size 30991360
Filesystem created: Thu Sep 21 09:13:04 2017
Last mount time: Thu Oct 5 13:29:45 2017
Linux 23695 122 44 25624 154 2 30991360 [retropie]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 15 GB / 14 GiB
file_pread(6,2,buffer,488398847(30401/107/42)) lseek err Invalid argument
file_pread(6,1,buffer,488398847(30401/107/42)) lseek err Invalid argument
file_pread(6,2,buffer,488398848(30401/107/43)) lseek err Invalid argument
Results
Linux 23688 54 47 25617 102 21 30992384 [retropie]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 15 GB / 14 GiB
Linux 23688 152 17 25617 199 54 30992384 [retropie]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 15 GB / 14 GiB
Linux 23695 122 44 25624 170 18 30992384 [retropie]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 15 GB / 14 GiB
interface_write()
No partition found or selected for recovery
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
New options :
Dump : No
Align partition: Yes
Expert mode : Yes
Analyse Disk /dev/sdc - 250 GB / 232 GiB - CHS 30401 255 63
Geometry from i386 MBR: head=255 sector=63
test_FAT()
1 P FAT16 >32M 0 32 33 30401 42 41 488392704
sector_size 0
cluster_size 0
reserved 0
fats 0
dir_entries 0
sectors 0
media 00
fat_length 0
secs_track 0
heads 0
hidden 0
total_sect 0
check_part_i386 failed for partition type 06
Current partition structure:
Invalid FAT boot sector
1 P FAT16 >32M 0 32 33 30401 42 41 488392704
1 P FAT16 >32M 0 32 33 30401 42 41 488392704
No partition is bootable
search_part()
Disk /dev/sdc - 250 GB / 232 GiB - CHS 30401 255 63
recover_EXT2: s_block_group_nr=0/118, s_mnt_count=152/4294967295, s_blocks_per_group=32768, s_inodes_per_group=7840
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 3873920
recover_EXT2: part_size 30991360
Filesystem created: Thu Sep 21 09:13:04 2017
Last mount time: Mon Nov 6 15:12:48 2017
Linux 23688 54 47 25617 86 5 30991360 [retropie]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 15 GB / 14 GiB
file_pread(6,2,buffer,488398847(30401/107/42)) lseek err Invalid argument
file_pread(6,1,buffer,488398847(30401/107/42)) lseek err Invalid argument
file_pread(6,2,buffer,488398848(30401/107/43)) lseek err Invalid argument
file_pread(6,14,buffer,488398850(30401/107/45)) lseek err Invalid argument
file_pread(6,3,buffer,488398864(30401/107/59)) lseek err Invalid argument
file_pread(6,3,buffer,488398911(30401/108/43)) lseek err Invalid argument
file_pread(6,8,buffer,488398927(30401/108/59)) lseek err Invalid argument
file_pread(6,11,buffer,488398974(30401/109/43)) lseek err Invalid argument
file_pread(6,2,buffer,488400896(30401/140/12)) lseek err Invalid argument
Results
* Linux 23688 54 47 25617 102 21 30992384 [retropie]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 15 GB / 14 GiB
interface_write()
1 * Linux 23688 54 47 25617 102 21 30992384 [retropie]
search_part()
Disk /dev/sdc - 250 GB / 232 GiB - CHS 30401 255 63
recover_EXT2: s_block_group_nr=0/118, s_mnt_count=152/4294967295, s_blocks_per_group=32768, s_inodes_per_group=7840
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 3873920
recover_EXT2: part_size 30991360
Filesystem created: Thu Sep 21 09:13:04 2017
Last mount time: Mon Nov 6 15:12:48 2017
Linux 23688 54 47 25617 86 5 30991360 [retropie]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 15 GB / 14 GiB
recover_EXT2: s_block_group_nr=0/118, s_mnt_count=147/4294967295, s_blocks_per_group=32768, s_inodes_per_group=7840
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 3873920
recover_EXT2: part_size 30991360
Filesystem created: Thu Sep 21 09:13:04 2017
Last mount time: Mon Nov 6 13:30:23 2017
Linux 23688 152 17 25617 183 38 30991360 [retropie]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 15 GB / 14 GiB
recover_EXT2: s_block_group_nr=0/118, s_mnt_count=10/4294967295, s_blocks_per_group=32768, s_inodes_per_group=7840
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 3873920
recover_EXT2: part_size 30991360
Filesystem created: Thu Sep 21 09:13:04 2017
Last mount time: Thu Oct 5 13:29:45 2017
Linux 23695 122 44 25624 154 2 30991360 [retropie]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 15 GB / 14 GiB
file_pread(6,2,buffer,488398847(30401/107/42)) lseek err Invalid argument
file_pread(6,1,buffer,488398847(30401/107/42)) lseek err Invalid argument
file_pread(6,2,buffer,488398848(30401/107/43)) lseek err Invalid argument
Results
Linux 23688 54 47 25617 102 21 30992384 [retropie]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 15 GB / 14 GiB
Linux 23688 152 17 25617 199 54 30992384 [retropie]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 15 GB / 14 GiB
Linux 23695 122 44 25624 170 18 30992384 [retropie]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 15 GB / 14 GiB
interface_write()
No partition found or selected for recovery
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
TestDisk exited normally.